Privacy Policy

What the app keeps about you, where it lives, who helps us process it, and how to get it back or delete it.

Who we are

What Should We Watch (“the app”) is made by Manali (manali.page), which is the controller of the personal data described here. “We” and “us” mean Manali. You can reach us at ayush.agrawal7661@gmail.com.

Accounts and guests

You can use the app as a guest or sign in.

Signed in. Sign-in is handled by Clerk, our authentication provider, using Sign in with Apple, Google, or a one-time code sent to your email. We receive your email address, your name if the sign-in method provides it, and the identifiers needed to recognise your account. If you use Sign in with Apple and choose to hide your email, we receive Apple’s relay address instead.
Guest. No account is created. The app generates a random device identifier, stores it on your phone, and uses it to keep your swipes together. It is not linked to your name, email or Apple ID, and a new one is generated when you log out.

What we store on our servers

These are kept with your account (or guest identifier) so the app can learn your taste:

Swipe decisions: which films you liked, passed on, saved as maybe, or marked as already seen, with the moods you picked and the context of the moment (time of day, weekday and season).
Watched films and reactions: films you mark as watched and how it went (liked it, it was okay, or not for me).
Taste notes: a short summary of your taste that the app writes and updates from the decisions above.
A small preference: whether you have already seen the tutorial.
Feedback you send us: your message, with the app version, device model and iOS version. We do not attach your name or email to feedback. If you include them in the message itself, we will see them.

This data is stored with Microsoft Azure in the United States (Azure Cosmos DB for data, Azure Functions for the app’s backend, and Azure Key Vault for our secrets).

What stays on your phone

These are never sent to our servers as part of your profile:

your shortlist;
your country and the streaming services you selected (the app sends them along with each request for suggestions, so we only show films you can actually watch; they are not stored with your profile, except as described under Notifications if you allow them);
your settings;
your display name and your Disco (avatar);
reminders: the morning “how did it go?” follow-up is scheduled locally on your phone, not sent from a server.

Notifications

If you allow notifications, the app registers your phone so we can reach it. We store, with your account (or guest identifier):

a push token, an identifier Apple or Google assigns so a message can be delivered to your phone;
your time zone, so we never message you at night;
the app version;
your country and streaming services, so a message about a film only mentions one you can actually watch.

The morning-after follow-up doesn’t use this: it’s scheduled on your phone and never sent from a server. We use the registration only if you turn on “Occasional picks”, to send an occasional suggestion, at most about once a week and never at night in your time zone, for example when a film you liked is about to leave one of your services, or when you haven’t been back in a while. Messages are delivered through Expo’s push service, which passes them to Apple Push Notification service or Google Firebase Cloud Messaging.

You can turn notifications off at any time in the app’s Settings or your phone’s settings. Logging out removes this phone’s registration from your account, and deleting your account or your data deletes it.

How recommendations are made (AI processing)

To rank films and write the short reason shown with each one, we send the following to Azure OpenAI Service, operated by Microsoft:

the moods you picked and the time context (time of day, weekday, season);
your recent decisions: film titles, what you did with them, your reactions and the moods at the time;
your taste notes.

Your display name and email are never sent. We do not use your data to train AI models, and under Microsoft’s terms for Azure OpenAI Service, prompts and outputs are not used to train Microsoft’s or OpenAI’s models.

Streaming availability

Which films are on which service in which country comes from a third-party catalogue provider (Movie of the Night’s Streaming Availability API). Our servers fetch that catalogue on their own; no personal data about you is sent to the provider.

When you open a film, the app sends you to the streaming service’s app or website. What happens there is governed by that service’s own privacy policy.

Diagnostics

Our servers record request logs and telemetry in Azure Application Insights: request metadata (such as which endpoint was called, when, the response status and how long it took) and errors. We use this to keep the app working and fast.

The app itself reports performance and error data to EAS Observe, operated by Expo: how long the app takes to start and become usable, crashes and errors (with technical details such as the device model, operating system and app version), and product events such as whether a follow-up reminder was scheduled. These reports never include your name, your email or text you type.

We do not show ads, include advertising or tracking SDKs, sell your data, or track you across other companies’ apps and websites.

How we use your data

To provide the app: sign you in, remember your decisions and suggest films.
To improve suggestions over time, for you, using your own history.
To read and act on feedback you send.
To keep the service secure and working, and to enforce daily limits and our Terms of Use.

Where the law requires a legal basis, we rely on performing our agreement with you (providing the app you asked for) and our legitimate interest in running, securing and improving it.

We share data only with the service providers that run the app for us, and only for that purpose:

Clerk: sign-in and account management.
Microsoft Azure: hosting, storage, diagnostics and Azure OpenAI Service.
Expo (650 Industries, Inc.): delivering notifications, and app performance and error monitoring (EAS Observe).
Apple and Google, if you choose to sign in with them, and to deliver notifications to your phone, under their own terms.

We may also disclose data if the law requires it. We do not sell or rent personal data.

Your controls, retention and rights

Reset what we’ve learned (Settings): deletes your decisions, taste notes and watched history.
Export my data (Account, signed in): exports your country, services, how many decisions you have made, and your shortlist.
Delete account (Account): removes your account and schedules your data on our servers for permanent deletion within 60 days.
Log out: clears the app’s data from your phone.

We keep your data until you reset it or delete your account. Feedback messages and diagnostic logs are kept only as long as we need them to run and improve the app.

You can also ask us to access, correct or delete your personal data, or ask any question about it, by emailing ayush.agrawal7661@gmail.com. Depending on where you live, you may have further rights, including to object to or restrict processing, and to complain to your local data protection authority.

International transfers

Our servers are in the United States. If you use the app from elsewhere, your data is transferred to and processed in the United States by us and the providers listed above.

Security

Data is encrypted in transit between the app and our servers, and our secrets are held in Azure Key Vault. No system is perfectly secure, but we work to protect what you trust us with.

Children

The app is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the effective date above, and for significant changes we will tell you in the app. Continuing to use the app after a change means the updated policy applies.

Contact

Manali · manali.page · ayush.agrawal7661@gmail.com

In short